Top Cybersecurity Jobs in New York City, NY

Lead and grow an engineering team to design, build, and drive adoption of an ontology-based semantic data modeling framework. Define architecture, tooling, governance, integrations with cloud-native data systems, and enablement programs. Partner with product, AI/ML, and security teams to translate domain complexity into reusable ontologies and measurable adoption metrics, mentoring an international team and fostering technical excellence.

Design and implement Windows sensor detection and prevention features for the Falcon platform. Research attack techniques, develop user- and kernel-mode detection logic, own features from design through release, apply secure coding and CI/CD practices, troubleshoot customer issues, and collaborate across teams to improve telemetry and protections.

Analyze malware, intrusions, and telemetry from Windows endpoints to author and tune behavioral detections (IOAs) on the Falcon sensor. Validate detections via telemetry queries, manage lifecycle from development to production, investigate false positives, and collaborate with threat intel and IR teams to prioritize and deploy detection coverage.

Design, build, and scale foundational platform services to ingest, process, and route internet-scale security events. Develop fault-tolerant microservices, CI/CD and DevOps tooling for detection-as-code, evolve unified detection management, drive observability and policy features, mentor engineers, and collaborate cross-functionally to deliver real-time detection generation.

Design, build, and scale core backend platform services that ingest, process, and route security events. Architect the Detection Content Management Platform and CI/CD tooling, implement fault-tolerant microservices (Go/Java/Python), mentor engineers, and drive features for policy, observability, and real-time detection across CrowdStrike products.

Lead a team building petabyte-scale, multi-region data ingestion for NG-SIEM. Own roadmap, OKRs, SLOs, operational excellence, cross-team collaboration, and stakeholder engagement while optimizing availability, performance, and cost.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

Lead product strategy and roadmap for AI-native capabilities in CrowdStrike's Next-Gen SIEM. Collaborate with engineering, data science, research, marketing, sales, and support to design, deliver, and position AI-driven detection, investigation, and prevention features. Conduct competitive analysis, define use cases, and engage customers to inform product direction while supporting go-to-market and cross-functional execution.

Design, develop, test, and maintain out-of-the-box data connectors and parsers to ingest security logs into CrowdStrike Next‑Gen SIEM. Build lab environments, troubleshoot ingestion issues, collaborate on logging and normalization best practices, produce technical documentation, provide on‑call support, and work with customers and internal teams to resolve data ingestion incidents.

Design and implement core features for a lightweight macOS security sensor, collaborate cross-platform with teams, own feature lifecycle from design through delivery, debug low-level memory and performance issues, and mentor distributed engineers while aligning sensor architecture with broader Falcon Host strategy.